Your Rights
Subject to applicable law, individuals may request access to their personal data, correction of inaccurate information, deletion where appropriate, restriction of processing, or objection to certain processing activities. Where a request cannot be fully granted, the response will explain the relevant limitation.
Available rights depend on the nature of the data and the legal basis for processing.
How to Make a Request
Rights requests should identify the data or interaction concerned and provide enough detail for review. If additional information is needed to verify the request, it may be requested before a substantive response is issued.
Requests are handled after reasonable verification of identity and scope.
Retention of Data
Personal data is kept only for as long as necessary for enquiry handling, service administration, security, legal compliance, and related business records. When data is no longer required, it is deleted or anonymised according to the applicable retention practice and system limitations.
Retention is limited to the period needed for the stated purpose and any applicable record-keeping duty.
Policy Updates
When this policy is updated, the revised version will apply from the stated effective date. Material changes may be highlighted through the website or other appropriate communication channels where practical.
This notice may be revised to reflect operational, legal, or technical changes.